This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft File: bBt3vE7dikuDdEdqc0dxm2drdV4.mft (raw, json) Hash identifier: VK9wSeQo+UCb9wYlH4v/3AYDVmqVjOtz0IjO9pMISSE= Subject key identifier: F2:C1:DD:0D:EF:BC:86:57:C2:A7:3C:30:D7:1D:58:5B:D5:DC:50:C2 Authority key identifier: 6C:1B:77:BC:4E:DD:8A:4B:83:74:47:6A:73:47:71:9B:67:6B:75:5E Certificate issuer: /CN=6c1b77bc4edd8a4b8374476a7347719b676b755e Certificate serial: 019B2287462EE61132E885AA68854219AF74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBt3vE7dikuDdEdqc0dxm2drdV4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft Manifest number: 0910 Signing time: Mon 15 Dec 2025 15:00:49 +0000 Manifest this update: Mon 15 Dec 2025 15:00:49 +0000 Manifest next update: Tue 16 Dec 2025 15:00:49 +0000 Files and hashes: 1: O2px1aU6bIAARpFepBVuBuziiJg.roa (hash: YWn9Xv+EiDSxX317xosj76y38TuR6qoVCsWMWeoaRA8=) 2: bBt3vE7dikuDdEdqc0dxm2drdV4.crl (hash: xiTS1xPsivNiiFyzgQPEvJ2ONM8KOTDfHOC4I8+OA60=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.crl rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft rsync://rpki.ripe.net/repository/DEFAULT/bBt3vE7dikuDdEdqc0dxm2drdV4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:87:46:2e:e6:11:32:e8:85:aa:68:85:42:19:af:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c1b77bc4edd8a4b8374476a7347719b676b755e Validity Not Before: Dec 15 15:00:49 2025 GMT Not After : Dec 16 15:00:49 2025 GMT Subject: CN=f2c1dd0defbc8657c2a73c30d71d585bd5dc50c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:fa:f1:60:d0:e3:97:16:84:48:ee:ab:ad:8f: fd:e1:b1:fc:ca:7c:ba:f9:df:9b:e6:74:c0:49:fb: e1:85:1a:57:7c:10:71:e9:01:6d:d9:58:73:6a:a6: 3f:68:5b:9e:9e:0f:1d:b8:3a:8d:5c:49:7b:39:02: 66:fe:f6:5e:3e:f2:15:ca:a1:c6:ec:7e:cf:29:8e: a8:c1:53:2b:9d:41:a2:24:bd:ae:35:c7:f6:18:5a: 86:87:55:75:75:b0:44:76:60:eb:30:ed:fe:b2:a8: 83:fd:5c:db:56:70:84:5a:69:89:3e:f5:ee:5c:0d: 8b:a7:0a:7a:09:3c:b6:f6:31:c0:c3:f2:58:25:7a: 7b:c3:b9:8f:90:87:c6:49:76:64:5f:a8:a3:92:1d: 87:40:cd:36:b6:dc:ef:10:ce:fd:2c:d5:74:c8:dc: 94:81:8c:3e:7d:48:2c:b2:39:23:34:b9:bb:10:d8: 4b:5b:27:86:9b:dd:01:a4:c9:bd:95:aa:fe:ee:f3: 45:ba:8a:3f:70:13:56:2e:8f:b6:8f:f4:4f:13:d4: 2d:9c:8e:b0:bd:83:f7:f0:05:51:fd:5b:ab:9a:a3: 99:fc:09:09:53:8a:a8:4d:34:7f:b6:c3:c7:8c:96: 3d:91:b2:7e:cf:fd:93:b8:f7:9c:8d:19:06:9d:78: 94:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C1:DD:0D:EF:BC:86:57:C2:A7:3C:30:D7:1D:58:5B:D5:DC:50:C2 X509v3 Authority Key Identifier: keyid:6C:1B:77:BC:4E:DD:8A:4B:83:74:47:6A:73:47:71:9B:67:6B:75:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBt3vE7dikuDdEdqc0dxm2drdV4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:f3:e2:a8:8c:c4:e7:c2:86:3a:fe:88:9b:2f:90:5b:89:e8: 75:ea:4a:73:ab:a9:49:ae:21:ea:4c:ec:6c:5c:f4:6a:e8:a2: 30:97:33:2e:bd:9c:d7:42:3b:be:a6:6f:ab:56:50:0c:8a:e7: c2:86:3d:ab:c8:99:bc:ca:82:1b:2c:fc:9d:a3:8e:2e:37:cf: 44:73:14:ff:9e:3e:ac:56:43:fb:97:bb:e8:bc:15:9f:96:bf: cf:18:d2:2c:71:db:c7:8a:88:7c:0a:24:f6:54:23:24:94:7f: 0c:e7:73:29:8f:58:c8:d8:42:63:d4:74:75:35:6b:0e:f8:4d: 9c:ed:40:a3:1e:eb:c8:89:48:fc:35:4f:e7:f5:8f:8f:65:fc: a6:f9:f1:bf:7d:44:aa:cb:2b:b2:b7:94:63:55:58:8e:25:18: c6:0c:ac:b3:ba:7f:e1:ae:96:87:8c:81:fe:00:3b:eb:0d:d6: 5e:dd:14:a7:dd:2b:c2:28:fb:f9:55:ff:fe:29:7f:66:1e:c4: b5:2a:9f:2e:15:60:21:71:86:8d:95:27:04:fb:a2:13:8a:6e: a8:3f:9a:9f:e8:ec:d1:ec:bb:1c:e6:af:31:40:2b:2e:2c:c6: b0:92:8d:d2:f6:2c:67:0e:35:23:b7:5a:bc:23:0c:15:a4:79: 2b:ab:0f:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsih0Yu5hEy6IWqaIVCGa90MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMWI3N2JjNGVkZDhhNGI4Mzc0NDc2YTczNDc3MTliNjc2 Yjc1NWUwHhcNMjUxMjE1MTUwMDQ5WhcNMjUxMjE2MTUwMDQ5WjAzMTEwLwYDVQQD EyhmMmMxZGQwZGVmYmM4NjU3YzJhNzNjMzBkNzFkNTg1YmQ1ZGM1MGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/rxYNDjlxaESO6rrY/94bH8yny6 +d+b5nTASfvhhRpXfBBx6QFt2VhzaqY/aFueng8duDqNXEl7OQJm/vZePvIVyqHG 7H7PKY6owVMrnUGiJL2uNcf2GFqGh1V1dbBEdmDrMO3+sqiD/VzbVnCEWmmJPvXu XA2Lpwp6CTy29jHAw/JYJXp7w7mPkIfGSXZkX6ijkh2HQM02ttzvEM79LNV0yNyU gYw+fUgssjkjNLm7ENhLWyeGm90BpMm9lar+7vNFuoo/cBNWLo+2j/RPE9QtnI6w vYP38AVR/VurmqOZ/AkJU4qoTTR/tsPHjJY9kbJ+z/2TuPecjRkGnXiU6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPLB3Q3vvIZXwqc8MNcdWFvV3FDCMB8GA1UdIwQY MBaAFGwbd7xO3YpLg3RHanNHcZtna3VeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkJ0M3ZFN2Rpa3VEZEVkcWMwZHhtMmRyZFY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zNjdkMzktOGJlNC00ZWNiLTliYjYt ZmZkOTFiNDI1YTAwLzEvYkJ0M3ZFN2Rpa3VEZEVkcWMwZHhtMmRyZFY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zNjdkMzktOGJlNC00ZWNiLTliYjYtZmZkOTFiNDI1YTAw LzEvYkJ0M3ZFN2Rpa3VEZEVkcWMwZHhtMmRyZFY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALfPiqIzE 58KGOv6Imy+QW4nodepKc6upSa4h6kzsbFz0auiiMJczLr2c10I7vqZvq1ZQDIrn woY9q8iZvMqCGyz8naOOLjfPRHMU/54+rFZD+5e76LwVn5a/zxjSLHHbx4qIfAok 9lQjJJR/DOdzKY9YyNhCY9R0dTVrDvhNnO1Aox7ryIlI/DVP5/WPj2X8pvnxv31E qssrsreUY1VYjiUYxgyss7p/4a6Wh4yB/gA76w3WXt0Up90rwij7+VX//il/Zh7E tSqfLhVgIXGGjZUnBPuiE4puqD+an+js0ey7HOavMUArLizGsJKN0vYsZw41I7da vCMMFaR5K6sPug== -----END CERTIFICATE-----Generated at Mon Dec 15 16:55:42 2025 by rpki-client